skills/vm0-ai/vm0-skills/qomplement/Gen Agent Trust Hub

qomplement

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands including curl, jq, and a diagnostic tool zero doctor.
  • Evidence: The skill provides a troubleshooting command zero doctor check-connector and a curl usage example for performing authenticated API requests.
  • [EXTERNAL_DOWNLOADS]: Performs network requests to external endpoints to retrieve data and manage credentials.
  • Evidence: Connects to app.vm0.ai (vendor infrastructure) for connector setup and qomplement.com for API operations.
  • [PROMPT_INJECTION]: Contains an attack surface for indirect prompt injection through the ingestion of external API data.
  • Ingestion points: External API responses processed via the curl command in SKILL.md.
  • Boundary markers: None present in the provided shell example.
  • Capability inventory: Shell execution capabilities (curl, jq).
  • Sanitization: No explicit sanitization or validation of API content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 07:13 AM
Security Audit — agent-trust-hub — qomplement